Lucene search
+L

1532 matches found

Rosalinux
Rosalinux
•added 2021/07/02 6:19 p.m.•41 views

Advisory ROSA-SA-2021-1994

Software: vorbis-tools 1.4.0 OS: Cobalt 7.9 CVE-ID: CVE-2014-9638 CVE-Crit: MEDIUM CVE-DESC: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service division-by-zero error and crash via a WAV file with the number of channels set to zero. CVE-STATUS: default CVE-REV:...

5.5CVSS5.6AI score0.03793EPSS
SaveExploits6
Veracode
Veracode
•added 2021/07/01 7:35 a.m.•29 views

Information Disclosure

bass is vulnerable to information disclosure. An out-of-bounds read vulnerability occurs when an attacker submits a malicious wav file...

6.5CVSS2.7AI score0.0129EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2021/06/24 7:57 a.m.•93 views

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

5.5CVSS1.9AI score0.00481EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2021/06/01 10:10 a.m.•31 views

Exploit for Improper Restriction of XML External Entity Reference in Wordpress

설치 및 실행 순서 0. docker 실행 $docker-compose up 1. w...

7.1CVSS6.5AI score0.85719EPSS
SaveExploits21
Check Point Advisories
Check Point Advisories
•added 2021/06/01 12:00 a.m.•33 views

WordPress Core External Entity Injection (CVE-2021-29447)

An XXE vulnerability exists in WordPress Core. The vulnerability is due to insufficient validation of XML data when parsing RIFF WAV file metadata...

4CVSS4.8AI score0.85719EPSS
SaveExploits21
CNVD
CNVD
•added 2021/04/16 12:00 a.m.•32 views

Daniel Kamil Kozar tsMuxer Buffer Overflow Vulnerability

Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. Daniel Kamil Kozar tsMuxer 2.6.16 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS by...

5.5CVSS7.2AI score0.00706EPSS
SaveExploits1References1
OSV
OSV
•added 2021/04/14 2:15 p.m.•12 views

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

5.5CVSS5.8AI score0.00706EPSS
SaveExploits1References1
NVD
NVD
•added 2021/04/14 2:15 p.m.•18 views

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

5.5CVSS0.00706EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/14 2:15 p.m.•22 views

Buffer overflow

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

4.3CVSS5.4AI score0.00706EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/14 1:51 p.m.•29 views

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

5.7AI score0.00706EPSS
SaveExploits1References1
CVE
CVE
•added 2021/04/14 1:51 p.m.•66 views

CVE-2021-26805

CVE-2021-26805 concerns a buffer overflow in tsMuxer 2.6.16 when processing a malicious WAV file, enabling a DoS. Affected component: tsMuxer (2.6.16). Root cause: buffer overflow in WAV handling. Impact: denial of service; availability partially affected. Exploitation details are not provided in...

5.5CVSS5.4AI score0.00706EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/04/14 12:00 a.m.•13 views

Daniel Kamil Kozar tsMuxer 安全漏洞

Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. Daniel Kamil Kozar tsMuxer 2.6.16 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS by...

5.5CVSS6.1AI score0.00706EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•5 views

CVE-2021-26805: Buffer Copy without Checking Size of Input

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

5.5CVSS5.8AI score0.00706EPSS
SaveExploits1References2
Fedora
Fedora
•added 2021/04/06 1:04 a.m.•45 views

[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

7.5CVSS3.2AI score0.04238EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2021/01/28 8:00 a.m.•11 views

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.

...

6.5CVSS7AI score0.01689EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2021/01/07 12:00 a.m.•28 views

Ubuntu 18.04 LTS / 20.04 LTS : WavPack vulnerability (USN-4682-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4682-1 advisory. It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a...

6.1CVSS7.1AI score0.01211EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2021/01/06 1:24 p.m.•128 views

USN-4682-1: WavPack vulnerability

It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

6.1CVSS7.2AI score0.01211EPSS
SaveExploits1
OSV
OSV
•added 2021/01/06 1:24 p.m.•12 views

USN-4682-1 wavpack vulnerability

It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

6.1CVSS7.1AI score0.01211EPSS
SaveExploits1References2
OSV
OSV
•added 2021/01/01 12:00 a.m.•41 views

ASB-A-170583712

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

7.1CVSS6.3AI score0.01098EPSS
SaveExploits0References2
Veracode
Veracode
•added 2020/12/06 4:37 a.m.•29 views

Buffer Overflows

Sound eXchange is vulnerable to buffer overflows. Remote attackers could cause overflows using a crafted WAV file via AdpcmReadBlock function...

7.5CVSS6AI score0.07709EPSS
SaveExploits1References10Affected Software1
Rows per page
Query Builder